Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File:                     5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier:          t87KhykLFUiqb8zcixbIy/00hTK3GfikI9R4Ka5IZ4Q=
Subject key identifier:   C7:55:6D:DA:9A:F4:CF:15:03:4A:8E:22:32:70:6A:64:40:61:35:F6
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer:       /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial:       019847ADCBA506691E689A4C047CBABE5317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number:          01E1
Signing time:             Sat 26 Jul 2025 17:00:28 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:28 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:28 +0000
Files and hashes:         1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: PV0ajGHwklwc7Kui9unSAu3jPhmlZI4WLoq4E91TNw0=)
                          2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:cb:a5:06:69:1e:68:9a:4c:04:7c:ba:be:53:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
        Validity
            Not Before: Jul 26 17:00:28 2025 GMT
            Not After : Jul 27 17:00:28 2025 GMT
        Subject: CN=c7556dda9af4cf15034a8e2232706a64406135f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:d5:bc:32:4a:12:ba:98:18:6f:6d:3c:39:
                    83:0c:39:69:23:ae:23:c6:3c:93:aa:ba:ee:a6:ef:
                    0d:cb:01:3d:19:61:19:e6:8a:10:68:84:33:b0:8e:
                    39:9d:a9:af:49:9d:c4:87:d2:80:d0:ef:b4:02:c9:
                    02:a7:f6:3c:25:53:29:71:8c:61:35:cf:6e:e7:89:
                    cb:b9:84:27:38:81:ae:07:a2:ed:81:dc:3b:1c:4c:
                    68:72:cb:87:d7:4a:c5:54:45:b0:d4:d6:50:bf:ef:
                    a5:9b:5a:a5:ec:7f:09:f6:52:14:86:17:61:e6:89:
                    a7:d1:18:cc:38:b6:a8:f2:10:2a:4b:b6:53:33:d7:
                    36:dd:a7:26:a6:c0:f4:0d:db:ee:35:7c:f4:09:48:
                    e8:b4:59:10:85:9d:2d:8c:83:ee:10:2d:ff:ed:f6:
                    24:cc:70:ac:37:d7:ab:c7:21:fa:ca:1b:a7:6e:12:
                    49:43:1b:53:2d:a1:c3:98:e2:ed:99:53:93:df:5c:
                    7a:09:2d:68:40:83:1a:5e:09:5c:80:30:46:f9:9f:
                    81:0b:4e:13:26:ac:7c:c4:98:a9:40:b7:62:30:01:
                    3e:aa:76:eb:94:8a:97:d2:c2:09:25:a0:ff:ff:d5:
                    f8:fb:fa:a1:d0:ca:39:a9:a9:5f:9d:fe:96:42:cc:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:55:6D:DA:9A:F4:CF:15:03:4A:8E:22:32:70:6A:64:40:61:35:F6
            X509v3 Authority Key Identifier:
                keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:ff:c4:2c:b6:de:d7:09:16:5a:22:bd:af:8a:fe:b5:b3:
         24:21:3b:6c:87:cc:0a:d2:62:3b:1b:8a:18:e0:f9:d6:c4:79:
         02:2d:9d:3e:38:82:c2:0b:a1:34:04:60:a5:96:aa:72:4f:94:
         2a:44:97:b7:df:8a:6e:52:e2:c4:72:3f:10:b5:71:f6:68:31:
         2b:f1:01:f4:7c:be:90:a7:bb:be:d9:07:33:dc:3c:1b:dc:fb:
         63:27:ee:c3:26:56:b5:c2:b9:b4:66:74:74:0a:be:45:37:0a:
         d1:32:13:d9:fb:45:09:aa:13:78:bc:dc:13:ca:b5:3b:15:1b:
         bd:1d:39:57:6b:13:25:25:3c:c9:9b:62:f8:a7:3a:e2:50:75:
         d1:65:05:4c:4a:8c:e9:fb:95:4c:5f:75:02:3f:a2:01:47:ac:
         0e:22:1f:12:05:79:87:46:88:19:ae:42:03:00:55:1c:9d:88:
         f7:ff:e0:95:ae:f7:67:0c:5f:73:fe:34:d2:75:95:f5:1f:32:
         d9:7b:2a:42:49:3d:cd:28:76:f0:28:95:62:ff:aa:6c:3e:95:
         66:d2:9c:a1:6e:42:df:24:68:39:8d:92:79:5b:df:c1:12:e0:
         d6:db:f3:d4:e1:a9:9d:12:61:96:e6:f6:94:31:44:d9:56:45:
         db:23:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:26:15 2025 by rpki-client